@yadsh/dsh-qa-surface 0.1.1 → 0.2.0

package/lib/resolve-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-config.js","sourceRoot":"","sources":["../src/resolve-config.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAA4B,MAAM,CAAC,MAAM,CAC7E;IACE,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,EAAE;QACZ,cAAc,EAAE,iBAAiB;QACjC,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,IAAI;KACd,CAAC;IACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACrB,MAAM,EAAE,oBAAoB;QAC5B,UAAU,EAAE,gBAAgB;QAC5B,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,eAAe,EAAE,IAAI;KACtB,CAAC;IACF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC;QAChB,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,GAAG;KACrB,CAAC;IACF,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IACrC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QACzB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,aAAa;KACzB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;CACnD,CACF,CAAC;AAEF,SAAS,YAAY,CAAC,KAAgC;IACpD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACzE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,SAAS,CACjB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAChD,MAAM,SAAS,GAAG;QAChB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;KAChE,CAAC;IACF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CACjB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAC3B,KAAK,GAAoB,EAAE;IAE3B,MAAM,SAAS,GAAG,kBAAkB,CAClC,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAC1D,CAAC;IACF,MAAM,MAAM,GACV,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC;IACpE,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,OAAO,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CACjB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CACjB,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GACd,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;QACjC,yBAAyB,CAAC,OAAO,CAAC,UAAU,CAAC;IAC/C,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,eAAe,GACnB,KAAK,CAAC,EAAE,EAAE,eAAe,IAAI,yBAAyB,CAAC,EAAE,CAAC,eAAe,CAAC;IAC5E,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC;QACtC,eAAe,GAAG,GAAG;QACrB,eAAe,GAAG,IAAI,EACtB,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,EAAE,EAAE,aAAa,KAAK,IAAI,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CACjB,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,yBAAyB,CAAC,OAAO;QAC3D,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,SAAS;YACf,aAAa,EACX,KAAK,CAAC,KAAK,EAAE,aAAa;gBAC1B,yBAAyB,CAAC,KAAK,CAAC,aAAa;SAChD,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,KAAK,EACH,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;gBAC7B,yBAAyB,CAAC,QAAQ,CAAC,KAAK;YAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;YAChD,cAAc,EACZ,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE;gBACtC,yBAAyB,CAAC,QAAQ,CAAC,cAAc;YACnD,WAAW,EACT,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE;gBACnC,yBAAyB,CAAC,QAAQ,CAAC,WAAW;YAChD,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC;SAC/C,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,MAAM;YACN,UAAU;YACV,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC;YACrD,cAAc;YACd,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC;YACrD,QAAQ;YACR,KAAK;YACL,eAAe,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC;SAC9D,CAAC;QACF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC;YAChB,UAAU,EACR,KAAK,CAAC,EAAE,EAAE,UAAU,IAAI,yBAAyB,CAAC,EAAE,CAAC,UAAU;YACjE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,IAAI,yBAAyB,CAAC,EAAE,CAAC,SAAS;YACxE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,IAAI,yBAAyB,CAAC,EAAE,CAAC,QAAQ;YACrE,cAAc,EACZ,KAAK,CAAC,EAAE,EAAE,cAAc,IAAI,yBAAyB,CAAC,EAAE,CAAC,cAAc;YACzE,gBAAgB,EACd,KAAK,CAAC,EAAE,EAAE,gBAAgB;gBAC1B,yBAAyB,CAAC,EAAE,CAAC,gBAAgB;YAC/C,aAAa,EAAE,KAAK;YACpB,cAAc,EACZ,KAAK,CAAC,EAAE,EAAE,cAAc,IAAI,yBAAyB,CAAC,EAAE,CAAC,cAAc;YACzE,eAAe;SAChB,CAAC;QACF,kBAAkB,EAAE,eAAe,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC;QACnE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,aAAa;SACzB,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC;SAC9D,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"resolve-config.js","sourceRoot":"","sources":["../src/resolve-config.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAA4B,MAAM,CAAC,MAAM,CAC7E;IACE,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC1D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,EAAE;QACZ,cAAc,EAAE,kBAAkB;QAClC,WAAW,EAAE,iBAAiB;QAC9B,OAAO,EAAE,IAAI;QACb,UAAU,EACR,sGAAsG;KACzG,CAAC;IACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QACrB,MAAM,EAAE,oBAAoB;QAC5B,UAAU,EAAE,wBAAwB;QACpC,GAAG,EAAE,IAAI;QACT,WAAW,EAAE,IAAI;QACjB,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,IAAI;QACX,eAAe,EAAE,IAAI;KACtB,CAAC;IACF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC;QAChB,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,IAAI;QACd,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,IAAI;QACpB,eAAe,EAAE,GAAG;QACpB,eAAe,EAAE,KAAK;KACvB,CAAC;IACF,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC;QAChC,gBAAgB;QAChB,gBAAgB;QAChB,8BAA8B;KAC/B,CAAC;IACF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;QACzB,SAAS,EAAE,SAAS;QACpB,SAAS,EAAE,aAAa;KACzB,CAAC;IACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,OAAO,EAAE,IAAI;QACb,uBAAuB,EAAE,IAAI;QAC7B,qBAAqB,EAAE,IAAI;QAC3B,iBAAiB,EAAE,IAAI;QACvB,WAAW,EAAE,WAAW;QACxB,cAAc,EAAE,OAAO;QACvB,gBAAgB,EAAE,cAAc;QAChC,sBAAsB,EAAE,KAAK;QAC7B,kBAAkB,EAAE,KAAK;QACzB,qBAAqB,EAAE,KAAK;QAC5B,iBAAiB,EAAE,KAAK;QACxB,kBAAkB,EAAE,KAAK;QACzB,kBAAkB,EAAE,KAAK;QACzB,yBAAyB,EAAE,KAAK;QAChC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;YACxB,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SACzB,CAAC;KACH,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;CACnD,CACF,CAAC;AAEF,SAAS,YAAY,CAAC,KAAgC;IACpD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpC,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACzE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,SAAS,CACjB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAChD,MAAM,SAAS,GAAG;QAChB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;KAChE,CAAC;IACF,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CACjB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,MAAyB;IAChD,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;KAChE,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CACjB,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAC3B,KAAK,GAAoB,EAAE;IAE3B,MAAM,SAAS,GAAG,kBAAkB,CAClC,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAC1D,CAAC;IACF,MAAM,MAAM,GACV,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC;IACpE,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnE,IAAI,MAAM,KAAK,OAAO,IAAI,cAAc,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CACjB,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7C,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,SAAS,CACjB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,WAAW,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CACjB,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CACjB,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GACd,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE;QACjC,yBAAyB,CAAC,OAAO,CAAC,UAAU,CAAC;IAC/C,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,eAAe,GACnB,KAAK,CAAC,EAAE,EAAE,eAAe,IAAI,yBAAyB,CAAC,EAAE,CAAC,eAAe,CAAC;IAC5E,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC;QACtC,eAAe,GAAG,GAAG;QACrB,eAAe,GAAG,IAAI,EACtB,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GACnB,KAAK,CAAC,QAAQ,EAAE,OAAO,IAAI,yBAAyB,CAAC,QAAQ,CAAC,OAAO,CAAC;IACxE,MAAM,WAAW,GAAG,KAAK,CAAC,QACqB,CAAC;IAChD,MAAM,wBAAwB,GAAG;QAC/B,CAAC,wBAAwB,EAAE,WAAW,EAAE,sBAAsB,CAAC;QAC/D,CAAC,oBAAoB,EAAE,WAAW,EAAE,kBAAkB,CAAC;QACvD,CAAC,uBAAuB,EAAE,WAAW,EAAE,qBAAqB,CAAC;QAC7D,CAAC,oBAAoB,EAAE,WAAW,EAAE,kBAAkB,CAAC;QACvD,CAAC,oBAAoB,EAAE,WAAW,EAAE,kBAAkB,CAAC;QACvD,CAAC,2BAA2B,EAAE,WAAW,EAAE,yBAAyB,CAAC;KAC7D,CAAC;IACX,MAAM,YAAY,GAAG,wBAAwB,CAAC,IAAI,CAChD,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAC9B,CAAC;IACF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CACjB,4BAA4B,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAChE,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,EAAE,WAAW,KAAK,SAAS;QACzC,KAAK,CAAC,QAAQ,CAAC,WAAW,KAAK,WAAW,EAC1C,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,EAAE,cAAc,KAAK,SAAS;QAC5C,KAAK,CAAC,QAAQ,CAAC,cAAc,KAAK,OAAO,EACzC,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,IACE,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,KAAK,SAAS;QAC9C,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,YAAY,EAC/C,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GACpB,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE;QACxC,yBAAyB,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACtD,IAAI,eAAe,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,SAAS,CACjB,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GACrB,KAAK,CAAC,QAAQ,EAAE,iBAAiB;QACjC,yBAAyB,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACvD,IACE,eAAe;QACf,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,IAAI,yBAAyB,CAAC,EAAE,CAAC,SAAS,CAAC;QAC/D,CAAC,iBAAiB,EAClB,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,kEAAkE,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,yBAAyB,CAAC,OAAO;QAC3D,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,SAAS;YACf,aAAa,EACX,KAAK,CAAC,KAAK,EAAE,aAAa;gBAC1B,yBAAyB,CAAC,KAAK,CAAC,aAAa;SAChD,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,KAAK,EACH,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;gBAC7B,yBAAyB,CAAC,QAAQ,CAAC,KAAK;YAC1C,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;YAChD,cAAc,EACZ,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE;gBACtC,yBAAyB,CAAC,QAAQ,CAAC,cAAc;YACnD,WAAW,EACT,KAAK,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE;gBACnC,yBAAyB,CAAC,QAAQ,CAAC,WAAW;YAChD,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC9C,kEAAkE;YAClE,yCAAyC;YACzC,UAAU,EACR,KAAK,CAAC,QAAQ,EAAE,UAAU,KAAK,SAAS;gBACtC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,UAAU;gBAC/C,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;SACtD,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;YACrB,MAAM;YACN,UAAU;YACV,GAAG;YACH,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC;YACrD,cAAc;YACd,WAAW,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC;YACrD,QAAQ;YACR,KAAK;YACL,eAAe,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC;SAC9D,CAAC;QACF,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC;YAChB,UAAU,EACR,KAAK,CAAC,EAAE,EAAE,UAAU,IAAI,yBAAyB,CAAC,EAAE,CAAC,UAAU;YACjE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,IAAI,yBAAyB,CAAC,EAAE,CAAC,SAAS;YACxE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,IAAI,yBAAyB,CAAC,EAAE,CAAC,QAAQ;YACrE,cAAc,EACZ,KAAK,CAAC,EAAE,EAAE,cAAc,IAAI,yBAAyB,CAAC,EAAE,CAAC,cAAc;YACzE,gBAAgB,EACd,KAAK,CAAC,EAAE,EAAE,gBAAgB;gBAC1B,yBAAyB,CAAC,EAAE,CAAC,gBAAgB;YAC/C,aAAa,EACX,KAAK,CAAC,EAAE,EAAE,aAAa,IAAI,yBAAyB,CAAC,EAAE,CAAC,aAAa;YACvE,cAAc,EACZ,KAAK,CAAC,EAAE,EAAE,cAAc,IAAI,yBAAyB,CAAC,EAAE,CAAC,cAAc;YACzE,eAAe;YACf,eAAe,EACb,KAAK,CAAC,EAAE,EAAE,eAAe;gBACzB,yBAAyB,CAAC,EAAE,CAAC,eAAe;SAC/C,CAAC;QACF,kBAAkB,EAAE,eAAe,CACjC,KAAK,CAAC,kBAAkB,IAAI,yBAAyB,CAAC,kBAAkB,CACzE;QACD,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,aAAa;SACzB,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,OAAO,EAAE,eAAe;YACxB,uBAAuB,EACrB,KAAK,CAAC,QAAQ,EAAE,uBAAuB;gBACvC,yBAAyB,CAAC,QAAQ,CAAC,uBAAuB;YAC5D,qBAAqB,EACnB,KAAK,CAAC,QAAQ,EAAE,qBAAqB;gBACrC,yBAAyB,CAAC,QAAQ,CAAC,qBAAqB;YAC1D,iBAAiB,EACf,KAAK,CAAC,QAAQ,EAAE,iBAAiB;gBACjC,yBAAyB,CAAC,QAAQ,CAAC,iBAAiB;YACtD,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE,OAAO;YACvB,gBAAgB;YAChB,sBAAsB,EAAE,KAAK;YAC7B,kBAAkB,EAAE,KAAK;YACzB,qBAAqB,EAAE,KAAK;YAC5B,iBAAiB;YACjB,kBAAkB,EAAE,KAAK;YACzB,kBAAkB,EAAE,KAAK;YACzB,yBAAyB,EAAE,KAAK;YAChC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;gBACxB,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC;aAChE,CAAC;SACH,CAAC;QACF,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC;YACvB,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC;SAC9D,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/lib/secure-session.js

@@ -0,0 +1,170 @@
+import { SessionId } from "@deepseek-ai/dsh-session";
+import { WorkspaceId } from "@deepseek-ai/dsh-workspace";
+import { QaAttestationError } from "./attestation.js";
+import { qaToolDenial, qaToolPolicyPlan } from "./lockdown-policy.js";
+/** Grace period in which a fresh session may still be pinned to the QA preset. */
+const FRESH_SESSION_BOOTSTRAP_WINDOW_MS = 120_000;
+/**
+ * Compare session cwds the way the host records them: separator- and
+ * case-normalized on Windows, so a deployment path written with either
+ * separator or case still matches the session header cwd.
+ */
+function cwdMatches(headerCwd, pinned) {
+    if (headerCwd === undefined)
+        return false;
+    const normalize = (value) => value.replaceAll("\\", "/").replace(/\/+$/u, "");
+    const left = normalize(headerCwd);
+    const right = normalize(pinned);
+    return process.platform === "win32"
+        ? left.toLowerCase() === right.toLowerCase()
+        : left === right;
+}
+/**
+ * Host-side QA policy admission boundary — the only browser-callable operation
+ * that turns a session into a locked QA session. It verifies the immutable
+ * session composition against the effective deployment config, refuses to
+ * adopt a non-QA session with user history, validates the named permission
+ * preset, pins the scoped tool restriction plus the monotonic execution guard,
+ * and returns a sanitized proof. Every refusal carries only a coarse reason.
+ */
+export class QaPolicyAdmission {
+    ctx;
+    config;
+    logger;
+    appliedPolicies = new Map();
+    constructor(ctx, config, logger) {
+        this.ctx = ctx;
+        this.config = config;
+        this.logger = logger;
+        ctx.on("agent/disposed", ({ agent }) => {
+            this.appliedPolicies.delete(agent);
+        });
+    }
+    secureSession(sessionId) {
+        const config = this.config();
+        const lockdown = config.lockdown;
+        const agent = this.ctx.agents.get(SessionId(sessionId));
+        if (agent === undefined) {
+            throw new QaAttestationError("agent-unavailable", "agent is unavailable");
+        }
+        if (!lockdown.enabled) {
+            return {
+                sessionId,
+                enabled: false,
+                agentPresetMatches: true,
+                workspaceMatches: true,
+                modelMatches: true,
+                sandboxIsReadOnly: false,
+                approvalIsNever: false,
+                permissionPreset: "",
+                toolPolicyLoaded: false,
+                toolAllowList: [],
+            };
+        }
+        const expectedWorkspace = config.session.workspaceId;
+        const pinnedWorkspace = expectedWorkspace === null
+            ? undefined
+            : this.ctx.workspaceRegistry.get(WorkspaceId(expectedWorkspace));
+        // A pin that resolves to nothing would refuse the cwd comparison anyway,
+        // but the precise reason saves an operator a round trip: the surface
+        // stays closed until the workspace exists or the id is fixed.
+        if (expectedWorkspace !== null && pinnedWorkspace === undefined) {
+            throw new QaAttestationError("workspace-unavailable", `workspace ${expectedWorkspace} is not registered`);
+        }
+        const expectedPreset = config.session.agentPreset;
+        const agentPresetMatches = !lockdown.enforceFixedAgentPreset ||
+            expectedPreset === null ||
+            this.ctx.agentPresets.composedPreset(agent.ctx) === expectedPreset;
+        const workspaceMatches = !lockdown.enforceFixedWorkspace ||
+            (expectedWorkspace === null && config.session.cwd === null) ||
+            (pinnedWorkspace !== undefined &&
+                cwdMatches(agent.session.header.cwd, pinnedWorkspace.path)) ||
+            (expectedWorkspace === null &&
+                config.session.cwd !== null &&
+                cwdMatches(agent.session.header.cwd, config.session.cwd));
+        const options = agent.options;
+        const modelMatches = !lockdown.enforceFixedModel ||
+            config.session.provider === null ||
+            (options.provider === config.session.provider &&
+                options.model === config.session.model &&
+                (config.session.reasoningEffort === null ||
+                    options.reasoningEffort === config.session.reasoningEffort));
+        if (!agentPresetMatches || !workspaceMatches || !modelMatches) {
+            throw new QaAttestationError("composition-mismatch", `composition mismatch: agent=${agentPresetMatches} workspace=${workspaceMatches} model=${modelMatches}`);
+        }
+        const permission = this.ctx.permissionPresets.resolve(lockdown.permissionPreset);
+        if (permission.sandbox !== lockdown.sandboxMode ||
+            permission.approval !== lockdown.approvalPolicy) {
+            throw new QaAttestationError("permission-preset", `permission preset ${lockdown.permissionPreset} does not resolve to read-only/never`);
+        }
+        const currentPermission = this.ctx.permissionPresets.current(agent.session.events);
+        const hasUserHistory = agent.session.events.some((event) => event.type === "user/message");
+        if (currentPermission !== lockdown.permissionPreset &&
+            (hasUserHistory ||
+                Date.now() - agent.session.header.createdAt >
+                    FRESH_SESSION_BOOTSTRAP_WINDOW_MS)) {
+            throw new QaAttestationError("adoption-refused", "existing non-QA session cannot be adopted");
+        }
+        const policy = qaToolPolicyPlan(lockdown.toolPolicy.allow, (toolName) => this.ctx.tools.get(toolName, agent) !== undefined);
+        if (policy.unknown.length > 0) {
+            throw new QaAttestationError("unknown-tools", `unknown QA tool(s): ${policy.unknown.join(", ")}`);
+        }
+        const fingerprint = JSON.stringify(policy.allow);
+        const prior = this.appliedPolicies.get(agent);
+        if (prior?.fingerprint !== fingerprint) {
+            const allowed = new Set(policy.allow);
+            const disposeGuard = agent.ctx.tools.guard((execution) => qaToolDenial(allowed, execution.name));
+            try {
+                const disposeRestriction = agent.ctx.tools.restrict({
+                    allow: policy.allow,
+                });
+                this.appliedPolicies.set(agent, {
+                    fingerprint,
+                    disposeGuard,
+                    disposeRestriction,
+                });
+                prior?.disposeRestriction();
+                prior?.disposeGuard();
+            }
+            catch (error) {
+                disposeGuard();
+                throw error;
+            }
+        }
+        this.ctx.permissionPresets.set(agent.session, lockdown.permissionPreset);
+        const effectivePermission = this.ctx.permissionPresets.current(agent.session.events);
+        const sandboxIsReadOnly = permission.sandbox === "read-only";
+        const approvalIsNever = permission.approval === "never";
+        if (effectivePermission !== lockdown.permissionPreset ||
+            !sandboxIsReadOnly ||
+            !approvalIsNever) {
+            throw new QaAttestationError("attestation-failed", "permission attestation failed");
+        }
+        this.logger.debug("lockdown.attested", {
+            sessionId,
+            permissionPreset: lockdown.permissionPreset,
+            toolAllowList: policy.allow,
+        });
+        return {
+            sessionId,
+            enabled: true,
+            agentPresetMatches,
+            workspaceMatches,
+            modelMatches,
+            sandboxIsReadOnly,
+            approvalIsNever,
+            permissionPreset: lockdown.permissionPreset,
+            toolPolicyLoaded: true,
+            toolAllowList: policy.allow,
+        };
+    }
+    /** Detach every pinned tool policy; wired as a disposal effect by the entry. */
+    dispose() {
+        for (const policy of this.appliedPolicies.values()) {
+            policy.disposeRestriction();
+            policy.disposeGuard();
+        }
+        this.appliedPolicies.clear();
+    }
+}
+//# sourceMappingURL=secure-session.js.map

package/lib/secure-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-session.js","sourceRoot":"","sources":["../src/secure-session.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAStE,kFAAkF;AAClF,MAAM,iCAAiC,GAAG,OAAO,CAAC;AAElD;;;;GAIG;AACH,SAAS,UAAU,CAAC,SAA6B,EAAE,MAAc;IAC/D,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,EAAE,CAClC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO;QACjC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IAIT,GAAG;IACH,MAAM;IACN,MAAM;IALR,eAAe,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEnE,YACmB,GAAY,EACZ,MAAqC,EACrC,MAAoB;mBAFpB,GAAG;sBACH,MAAM;sBACN,MAAM;QAEvB,GAAG,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YACrC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,SAAiB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO;gBACL,SAAS;gBACT,OAAO,EAAE,KAAK;gBACd,kBAAkB,EAAE,IAAI;gBACxB,gBAAgB,EAAE,IAAI;gBACtB,YAAY,EAAE,IAAI;gBAClB,iBAAiB,EAAE,KAAK;gBACxB,eAAe,EAAE,KAAK;gBACtB,gBAAgB,EAAE,EAAE;gBACpB,gBAAgB,EAAE,KAAK;gBACvB,aAAa,EAAE,EAAE;aAClB,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QACrD,MAAM,eAAe,GACnB,iBAAiB,KAAK,IAAI;YACxB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACrE,yEAAyE;QACzE,qEAAqE;QACrE,8DAA8D;QAC9D,IAAI,iBAAiB,KAAK,IAAI,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAChE,MAAM,IAAI,kBAAkB,CAC1B,uBAAuB,EACvB,aAAa,iBAAiB,oBAAoB,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC;QAClD,MAAM,kBAAkB,GACtB,CAAC,QAAQ,CAAC,uBAAuB;YACjC,cAAc,KAAK,IAAI;YACvB,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,cAAc,CAAC;QAErE,MAAM,gBAAgB,GACpB,CAAC,QAAQ,CAAC,qBAAqB;YAC/B,CAAC,iBAAiB,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC;YAC3D,CAAC,eAAe,KAAK,SAAS;gBAC5B,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC;YAC7D,CAAC,iBAAiB,KAAK,IAAI;gBACzB,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI;gBAC3B,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAE9D,MAAM,OAAO,GAAG,KAAK,CAAC,OAErB,CAAC;QACF,MAAM,YAAY,GAChB,CAAC,QAAQ,CAAC,iBAAiB;YAC3B,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI;YAChC,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,OAAO,CAAC,QAAQ;gBAC3C,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK;gBACtC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI;oBACtC,OAAO,CAAC,eAAe,KAAK,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;QAEnE,IAAI,CAAC,kBAAkB,IAAI,CAAC,gBAAgB,IAAI,CAAC,YAAY,EAAE,CAAC;YAC9D,MAAM,IAAI,kBAAkB,CAC1B,sBAAsB,EACtB,+BAA+B,kBAAkB,cAAc,gBAAgB,UAAU,YAAY,EAAE,CACxG,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CACnD,QAAQ,CAAC,gBAAgB,CAC1B,CAAC;QACF,IACE,UAAU,CAAC,OAAO,KAAK,QAAQ,CAAC,WAAW;YAC3C,UAAU,CAAC,QAAQ,KAAK,QAAQ,CAAC,cAAc,EAC/C,CAAC;YACD,MAAM,IAAI,kBAAkB,CAC1B,mBAAmB,EACnB,qBAAqB,QAAQ,CAAC,gBAAgB,sCAAsC,CACrF,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAC1D,KAAK,CAAC,OAAO,CAAC,MAAM,CACrB,CAAC;QACF,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAC9C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc,CACzC,CAAC;QACF,IACE,iBAAiB,KAAK,QAAQ,CAAC,gBAAgB;YAC/C,CAAC,cAAc;gBACb,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS;oBACzC,iCAAiC,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,kBAAkB,CAC1B,kBAAkB,EAClB,2CAA2C,CAC5C,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAC7B,QAAQ,CAAC,UAAU,CAAC,KAAK,EACzB,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,SAAS,CAChE,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,kBAAkB,CAC1B,eAAe,EACf,uBAAuB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACnD,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CACvD,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CACtC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,kBAAkB,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;oBAClD,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC,CAAC;gBACH,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE;oBAC9B,WAAW;oBACX,YAAY;oBACZ,kBAAkB;iBACnB,CAAC,CAAC;gBACH,KAAK,EAAE,kBAAkB,EAAE,CAAC;gBAC5B,KAAK,EAAE,YAAY,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACzE,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,OAAO,CAC5D,KAAK,CAAC,OAAO,CAAC,MAAM,CACrB,CAAC;QACF,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,KAAK,WAAW,CAAC;QAC7D,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC;QACxD,IACE,mBAAmB,KAAK,QAAQ,CAAC,gBAAgB;YACjD,CAAC,iBAAiB;YAClB,CAAC,eAAe,EAChB,CAAC;YACD,MAAM,IAAI,kBAAkB,CAC1B,oBAAoB,EACpB,+BAA+B,CAChC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE;YACrC,SAAS;YACT,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;YAC3C,aAAa,EAAE,MAAM,CAAC,KAAK;SAC5B,CAAC,CAAC;QACH,OAAO;YACL,SAAS;YACT,OAAO,EAAE,IAAI;YACb,kBAAkB;YAClB,gBAAgB;YAChB,YAAY;YACZ,iBAAiB;YACjB,eAAe;YACf,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;YAC3C,gBAAgB,EAAE,IAAI;YACtB,aAAa,EAAE,MAAM,CAAC,KAAK;SAC5B,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,OAAO;QACL,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC;YACnD,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC5B,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAC/B,CAAC;CACF"}

package/lib/typert.host.d.ts

@@ -0,0 +1,3 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from FaceModel — do not edit. */
+
+export declare const TYPERT: unknown

package/lib/typert.host.js

@@ -0,0 +1,191 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from FaceModel — do not edit. */
+import { z } from 'zod'
+
+const _yadsh_dsh_qa_surface_qaSurface_describe_result$schema = z.object({
+  'enabled': z.boolean().readonly(),
+  'route': z.object({
+  'path': z.string().readonly(),
+  'matchChildren': z.boolean().readonly(),
+}).readonly(),
+  'branding': z.object({
+  'title': z.string().readonly(),
+  'subtitle': z.string().readonly(),
+  'welcomeMessage': z.string().readonly(),
+  'placeholder': z.string().readonly(),
+  'logoUrl': z.union([z.literal(null), z.string()]).readonly(),
+  'disclaimer': z.string().readonly(),
+}).readonly(),
+  'session': z.object({
+  'policy': z.union([z.literal("browser-persistent"), z.literal("new-on-load"), z.literal("fixed")]).readonly(),
+  'storageKey': z.string().readonly(),
+  'cwd': z.union([z.literal(null), z.string()]).readonly(),
+  'workspaceId': z.union([z.literal(null), z.string()]).readonly(),
+  'fixedSessionId': z.union([z.literal(null), z.string()]).readonly(),
+  'agentPreset': z.union([z.literal(null), z.string()]).readonly(),
+  'provider': z.union([z.literal(null), z.string()]).readonly(),
+  'model': z.union([z.literal(null), z.string()]).readonly(),
+  'reasoningEffort': z.union([z.literal(null), z.string()]).readonly(),
+}).readonly(),
+  'ui': z.object({
+  'showHeader': z.boolean().readonly(),
+  'showReset': z.boolean().readonly(),
+  'showStop': z.boolean().readonly(),
+  'showTimestamps': z.boolean().readonly(),
+  'showToolActivity': z.boolean().readonly(),
+  'showReasoning': z.boolean().readonly(),
+  'renderMarkdown': z.boolean().readonly(),
+  'maxContentWidth': z.number().readonly(),
+  'showSessionList': z.boolean().readonly(),
+}).readonly(),
+  'suggestedQuestions': z.array(z.string()).readonly(),
+  'interaction': z.object({
+  'approvals': z.literal("blocked").readonly(),
+  'questions': z.literal("unsupported").readonly(),
+}).readonly(),
+  'lockdown': z.object({
+  'enabled': z.boolean().readonly(),
+  'enforceFixedAgentPreset': z.boolean().readonly(),
+  'enforceFixedWorkspace': z.boolean().readonly(),
+  'enforceFixedModel': z.boolean().readonly(),
+  'sandboxMode': z.literal("read-only").readonly(),
+  'approvalPolicy': z.literal("never").readonly(),
+  'permissionPreset': z.string().readonly(),
+  'allowPermissionChanges': z.literal(false).readonly(),
+  'allowSlashCommands': z.literal(false).readonly(),
+  'allowSettingsMutation': z.literal(false).readonly(),
+  'allowSessionReset': z.boolean().readonly(),
+  'allowSessionRename': z.literal(false).readonly(),
+  'allowSessionDelete': z.literal(false).readonly(),
+  'allowArbitrarySessionOpen': z.literal(false).readonly(),
+  'toolPolicy': z.object({
+  'mode': z.literal("allow-list").readonly(),
+  'allow': z.array(z.string()).readonly(),
+}).readonly(),
+}).readonly(),
+  'embedding': z.object({
+  'frameAncestors': z.union([z.literal(null), z.string()]).readonly(),
+}).readonly(),
+})
+const _yadsh_dsh_qa_surface_qaSurface_secureSession_parameter_0$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_secureSession_result$schema = z.object({
+  'sessionId': z.string().readonly(),
+  'enabled': z.boolean().readonly(),
+  'agentPresetMatches': z.boolean().readonly(),
+  'workspaceMatches': z.boolean().readonly(),
+  'modelMatches': z.boolean().readonly(),
+  'sandboxIsReadOnly': z.boolean().readonly(),
+  'approvalIsNever': z.boolean().readonly(),
+  'permissionPreset': z.string().readonly(),
+  'toolPolicyLoaded': z.boolean().readonly(),
+  'toolAllowList': z.array(z.string()).readonly(),
+})
+
+export const TYPERT = {
+  package: '@yadsh/dsh-qa-surface',
+  face: 'host',
+  schemas: [
+  ],
+  invocations: [
+    {
+      id: '@yadsh/dsh-qa-surface#qaSurface/describe',
+      service: 'qaSurface',
+      namespace: 'qaSurface',
+      method: 'describe',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-qa-surface/types#ResolvedQaSurfaceConfig',
+        schema: _yadsh_dsh_qa_surface_qaSurface_describe_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":130,"column":3},
+    },
+    {
+      id: '@yadsh/dsh-qa-surface#qaSurface/secureSession',
+      service: 'qaSurface',
+      namespace: 'qaSurface',
+      method: 'secureSession',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'sessionId',
+          wire: 'sessionId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/secureSession:sessionId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_secureSession_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-qa-surface/types#QaLockdownProof',
+        schema: _yadsh_dsh_qa_surface_qaSurface_secureSession_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":136,"column":3},
+    },
+  ],
+  model: {
+    "services": [
+      {
+        "description": "Host companion: validates config, owns the admission boundary and the route.",
+        "summary": "Host companion: validates config, owns the admission boundary and the route.",
+        "tags": [],
+        "jsDoc": "/** Host companion: validates config, owns the admission boundary and the route. */",
+        "key": "qaSurface",
+        "exportName": "QaSurface",
+        "members": [
+          {
+            "kind": "method",
+            "name": "getConfig",
+            "signature": "getConfig(): ResolvedQaSurfaceConfig"
+          },
+          {
+            "kind": "method",
+            "name": "describe",
+            "signature": "@Remote(\"describe\") describe(): ResolvedQaSurfaceConfig",
+            "summary": "Serve the effective QA configuration to the browser.",
+            "jsDoc": "/**\n * Serve the effective QA configuration to the browser. The DSH gateway pins\n * settings RPCs to loopback, so a browser served over the LAN always sees\n * the settings namespace as unavailable; this method is the config channel\n * such a browser falls back to. It is read-only projection — the admission\n * boundary stays in {@link secureSession}.\n */"
+          },
+          {
+            "kind": "method",
+            "name": "secureSession",
+            "signature": "@Remote(\"secureSession\") secureSession(sessionId: string): QaLockdownProof",
+            "summary": "Pin and attest the effective policy.",
+            "jsDoc": "/** Pin and attest the effective policy. The browser supplies identity only. */"
+          }
+        ],
+        "types": [
+          {
+            "name": "QaApprovalPolicy",
+            "declaration": "export type QaApprovalPolicy = \"never\";"
+          },
+          {
+            "name": "QaLockdownProof",
+            "declaration": "export interface QaLockdownProof {\n    readonly sessionId: string;\n    readonly enabled: boolean;\n    readonly agentPresetMatches: boolean;\n    readonly workspaceMatches: boolean;\n    readonly modelMatches: boolean;\n    readonly sandboxIsReadOnly: boolean;\n    readonly approvalIsNever: boolean;\n    readonly permissionPreset: string;\n    readonly toolPolicyLoaded: boolean;\n    readonly toolAllowList: readonly string[];\n}"
+          },
+          {
+            "name": "QaSandboxMode",
+            "declaration": "export type QaSandboxMode = \"read-only\";"
+          },
+          {
+            "name": "QaSessionPolicy",
+            "declaration": "export type QaSessionPolicy = \"browser-persistent\" | \"new-on-load\" | \"fixed\";"
+          },
+          {
+            "name": "QaToolPolicyMode",
+            "declaration": "export type QaToolPolicyMode = \"allow-list\";"
+          },
+          {
+            "name": "ResolvedQaSurfaceConfig",
+            "declaration": "export interface ResolvedQaSurfaceConfig {\n    readonly enabled: boolean;\n    readonly route: { readonly path: string; readonly matchChildren: boolean; };\n    readonly branding: { readonly title: string; readonly subtitle: string; readonly welcomeMessage: string; readonly placeholder: string; readonly logoUrl: string | null; readonly disclaimer: string; };\n    readonly session: { readonly policy: QaSessionPolicy; readonly storageKey: string; readonly cwd: string | null; readonly workspaceId: string | null; readonly fixedSessionId: string | null; readonly agentPreset: string | null; readonly provider: string | null; readonly model: string | null; readonly reasoningEffort: string | null; };\n    readonly ui: { readonly showHeader: boolean; readonly showReset: boolean; readonly showStop: boolean; readonly showTimestamps: boolean; readonly showToolActivity: boolean; readonly showReasoning: boolean; readonly renderMarkdown: boolean; readonly maxContentWidth: number; readonly showSessionList: boolean; };\n    readonly suggestedQuestions: readonly string[];\n    readonly interaction: { readonly approvals: \"blocked\"; readonly questions: \"unsupported\"; };\n    readonly lockdown: { readonly enabled: boolean; readonly enforceFixedAgentPreset: boolean; readonly enforceFixedWorkspace: boolean; readonly enforceFixedModel: boolean; readonly sandboxMode: QaSandboxMode; readonly approvalPolicy: QaApprovalPolicy; readonly permissionPreset: string; readonly allowPermissionChanges: false; readonly allowSlashCommands: false; readonly allowSettingsMutation: false; readonly allowSessionReset: boolean; readonly allowSessionRename: false; readonly allowSessionDelete: false; readonly allowArbitrarySessionOpen: false; readonly toolPolicy: { readonly mode: QaToolPolicyMode; readonly allow: readonly string[]; }; };\n    readonly embedding: { readonly frameAncestors: string | null; };\n}"
+          }
+        ]
+      }
+    ],
+    "events": [],
+    "objects": []
+  },
+}

package/lib/typert.remote-client.d.ts

@@ -0,0 +1,24 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
+import type {
+  RemoteResult,
+  TypertRemoteContribution,
+} from '@deepseek-ai/dsh-typert-protocol'
+import type { QaLockdownProof, ResolvedQaSurfaceConfig } from '@yadsh/dsh-qa-surface/types'
+
+declare module '@deepseek-ai/dsh-typert-protocol' {
+  interface TypertRemoteNamespace$716153757266616365 {
+    describe: () => Promise<RemoteResult<ResolvedQaSurfaceConfig>>
+    secureSession: (sessionId: string) => Promise<RemoteResult<QaLockdownProof>>
+  }
+  interface TypertRemoteMap {
+    'qaSurface/describe': () => Promise<RemoteResult<ResolvedQaSurfaceConfig>>
+    'qaSurface/secureSession': (sessionId: string) => Promise<RemoteResult<QaLockdownProof>>
+  }
+  interface TypertRemoteNamespaceMap {
+    'qaSurface': TypertRemoteNamespace$716153757266616365
+  }
+}
+
+export declare const TYPERT_REMOTE: TypertRemoteContribution
+export default TYPERT_REMOTE
+//# sourceMappingURL=typert.remote-client.d.ts.map

package/lib/typert.remote-client.js

@@ -0,0 +1,129 @@
+/* Generated by @deepseek-ai/dsh-typert-generator from the Host FaceModel — do not edit. */
+import { z } from 'zod'
+
+const _yadsh_dsh_qa_surface_qaSurface_describe_result$schema = z.object({
+  'enabled': z.boolean().readonly(),
+  'route': z.object({
+  'path': z.string().readonly(),
+  'matchChildren': z.boolean().readonly(),
+}).readonly(),
+  'branding': z.object({
+  'title': z.string().readonly(),
+  'subtitle': z.string().readonly(),
+  'welcomeMessage': z.string().readonly(),
+  'placeholder': z.string().readonly(),
+  'logoUrl': z.union([z.literal(null), z.string()]).readonly(),
+  'disclaimer': z.string().readonly(),
+}).readonly(),
+  'session': z.object({
+  'policy': z.union([z.literal("browser-persistent"), z.literal("new-on-load"), z.literal("fixed")]).readonly(),
+  'storageKey': z.string().readonly(),
+  'cwd': z.union([z.literal(null), z.string()]).readonly(),
+  'workspaceId': z.union([z.literal(null), z.string()]).readonly(),
+  'fixedSessionId': z.union([z.literal(null), z.string()]).readonly(),
+  'agentPreset': z.union([z.literal(null), z.string()]).readonly(),
+  'provider': z.union([z.literal(null), z.string()]).readonly(),
+  'model': z.union([z.literal(null), z.string()]).readonly(),
+  'reasoningEffort': z.union([z.literal(null), z.string()]).readonly(),
+}).readonly(),
+  'ui': z.object({
+  'showHeader': z.boolean().readonly(),
+  'showReset': z.boolean().readonly(),
+  'showStop': z.boolean().readonly(),
+  'showTimestamps': z.boolean().readonly(),
+  'showToolActivity': z.boolean().readonly(),
+  'showReasoning': z.boolean().readonly(),
+  'renderMarkdown': z.boolean().readonly(),
+  'maxContentWidth': z.number().readonly(),
+  'showSessionList': z.boolean().readonly(),
+}).readonly(),
+  'suggestedQuestions': z.array(z.string()).readonly(),
+  'interaction': z.object({
+  'approvals': z.literal("blocked").readonly(),
+  'questions': z.literal("unsupported").readonly(),
+}).readonly(),
+  'lockdown': z.object({
+  'enabled': z.boolean().readonly(),
+  'enforceFixedAgentPreset': z.boolean().readonly(),
+  'enforceFixedWorkspace': z.boolean().readonly(),
+  'enforceFixedModel': z.boolean().readonly(),
+  'sandboxMode': z.literal("read-only").readonly(),
+  'approvalPolicy': z.literal("never").readonly(),
+  'permissionPreset': z.string().readonly(),
+  'allowPermissionChanges': z.literal(false).readonly(),
+  'allowSlashCommands': z.literal(false).readonly(),
+  'allowSettingsMutation': z.literal(false).readonly(),
+  'allowSessionReset': z.boolean().readonly(),
+  'allowSessionRename': z.literal(false).readonly(),
+  'allowSessionDelete': z.literal(false).readonly(),
+  'allowArbitrarySessionOpen': z.literal(false).readonly(),
+  'toolPolicy': z.object({
+  'mode': z.literal("allow-list").readonly(),
+  'allow': z.array(z.string()).readonly(),
+}).readonly(),
+}).readonly(),
+  'embedding': z.object({
+  'frameAncestors': z.union([z.literal(null), z.string()]).readonly(),
+}).readonly(),
+})
+const _yadsh_dsh_qa_surface_qaSurface_secureSession_parameter_0$schema = z.string()
+const _yadsh_dsh_qa_surface_qaSurface_secureSession_result$schema = z.object({
+  'sessionId': z.string().readonly(),
+  'enabled': z.boolean().readonly(),
+  'agentPresetMatches': z.boolean().readonly(),
+  'workspaceMatches': z.boolean().readonly(),
+  'modelMatches': z.boolean().readonly(),
+  'sandboxIsReadOnly': z.boolean().readonly(),
+  'approvalIsNever': z.boolean().readonly(),
+  'permissionPreset': z.string().readonly(),
+  'toolPolicyLoaded': z.boolean().readonly(),
+  'toolAllowList': z.array(z.string()).readonly(),
+})
+
+export const TYPERT_REMOTE = {
+  package: '@yadsh/dsh-qa-surface',
+  descriptors: [
+    {
+      id: '@yadsh/dsh-qa-surface#qaSurface/describe',
+      service: 'qaSurface',
+      namespace: 'qaSurface',
+      method: 'describe',
+      invocation: { kind: 'direct' },
+      parameters: [
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-qa-surface/types#ResolvedQaSurfaceConfig',
+        schema: _yadsh_dsh_qa_surface_qaSurface_describe_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":130,"column":3},
+    },
+    {
+      id: '@yadsh/dsh-qa-surface#qaSurface/secureSession',
+      service: 'qaSurface',
+      namespace: 'qaSurface',
+      method: 'secureSession',
+      invocation: { kind: 'direct' },
+      parameters: [
+        {
+          name: 'sessionId',
+          wire: 'sessionId',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@yadsh/dsh-qa-surface#qaSurface/secureSession:sessionId',
+            schema: _yadsh_dsh_qa_surface_qaSurface_secureSession_parameter_0$schema,
+          },
+        },
+      ],
+      result: {
+        mode: 'strict',
+        typeSymbol: '@yadsh/dsh-qa-surface/types#QaLockdownProof',
+        schema: _yadsh_dsh_qa_surface_qaSurface_secureSession_result$schema,
+      },
+      sourceLocation: {"file":"packages/dsh-qa-surface/src/index.ts","line":136,"column":3},
+    },
+  ],
+}
+
+export default TYPERT_REMOTE

package/lib/types/attestation.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Stable, coarse reason codes for QA policy attestation rejections.
+ *
+ * The RPC carrier folds a thrown Host error into `{ code, message, details }`
+ * and always empties `details`, so the wire message is the only channel back
+ * to the browser. The message therefore carries a `(reason: <code>)` marker:
+ * coarse enough to reveal nothing about the deployment policy to the QA
+ * audience, precise enough for an operator reading the browser console to
+ * know which class of mismatch to look for in the Host logs.
+ */
+export type QaAttestationReason = "agent-unavailable" | "workspace-unavailable" | "composition-mismatch" | "permission-preset" | "adoption-refused" | "unknown-tools" | "attestation-failed";
+/** Host rejection whose wire message carries the coarse reason marker. */
+export declare class QaAttestationError extends Error {
+    readonly reason: QaAttestationReason;
+    constructor(reason: QaAttestationReason, message: string);
+}
+//# sourceMappingURL=attestation.d.ts.map

package/lib/types/client/QaConfigController.d.ts

@@ -5,17 +5,49 @@ export interface QaConfigSnapshot {
     readonly config: ResolvedQaSurfaceConfig;
     readonly error: string | null;
 }
-/** Browser projection of the Host-owned qa-surface settings namespace. */
+/** Reads the effective Host configuration when the settings namespace cannot. */
+export type QaConfigFallback = () => Promise<ResolvedQaSurfaceConfig>;
+/**
+ * Browser projection of the Host-owned qa-surface settings namespace.
+ *
+ * The DSH gateway pins settings RPCs to loopback, so a browser served over the
+ * LAN always sees the namespace as `unavailable`. When the caller supplies the
+ * `qaSurface/describe` Remote as a fallback, that channel answers instead: the
+ * projection waits in `loading` until it settles, then reports the Host-owned
+ * configuration as `ready`. A rejected fallback returns the projection to
+ * `unavailable`, exactly as when no fallback exists.
+ */
 export declare class QaConfigController {
     private readonly scope;
     private readonly listeners;
     private snapshot;
     private readonly unsubscribe;
-    constructor(scope: SettingsScope<QaSurfaceConfig>);
+    private readonly fallback;
+    private fallbackState;
+    private fallbackConfig;
+    private disposed;
+    constructor(scope: SettingsScope<QaSurfaceConfig>, fallback?: QaConfigFallback);
     getSnapshot: () => QaConfigSnapshot;
     subscribe: (listener: () => void) => (() => void);
     dispose(): void;
     private project;
     private refresh;
+    /**
+     * Re-read the Host configuration after a Host reconnect. Without this, an
+     * open page keeps the configuration it fetched at load time: after the Host
+     * restarts with a changed deployment config, the next attestation compares
+     * its proof against the stale client copy and refuses. While re-reading,
+     * the previous answer stays projected — no loading flicker; the snapshot
+     * updates only when the answer actually changed.
+     */
+    refreshFallback(): void;
+    /**
+     * The fallback trigger rides every refresh: the scope flips to
+     * `unavailable` whenever the browser is served over the LAN, which a
+     * constructor-time check can miss. The state guard makes repeats a no-op,
+     * so one fetch runs per controller lifetime; the recursive refresh lets the
+     * pending state surface before the first notification pass.
+     */
+    private requestFallbackIfNeeded;
 }
 //# sourceMappingURL=QaConfigController.d.ts.map